
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC146/DAA76492AE0E11EB8ABA334DC4F9AE02/aQxynxg5BWTWcLGPd3R1Tl0nmVE.mft
File: aQxynxg5BWTWcLGPd3R1Tl0nmVE.mft (raw, json)
Hash identifier: MiT81E2vgLLsaLu7Q5rkENM94hUBdi4nfufjI/whsto=
Subject key identifier: 46:59:E8:44:7A:EF:6B:B3:2D:37:88:6D:46:75:1C:00:5D:AD:E9:DC
Authority key identifier: 69:0C:72:9F:18:39:05:64:D6:70:B1:8F:77:74:75:4E:5D:27:99:51
Certificate issuer: /CN=A91DC146/serialNumber=690C729F18390564D670B18F7774754E5D279951
Certificate serial: 06A2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aQxynxg5BWTWcLGPd3R1Tl0nmVE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DC146/DAA76492AE0E11EB8ABA334DC4F9AE02/aQxynxg5BWTWcLGPd3R1Tl0nmVE.mft
Manifest number: 069B
Signing time: Sat 18 Apr 2026 22:20:28 +0000
Manifest this update: Sat 18 Apr 2026 22:20:27 +0000
Manifest next update: Sat 25 Apr 2026 22:20:27 +0000
Files and hashes: 1: aQxynxg5BWTWcLGPd3R1Tl0nmVE.crl (hash: dXQYVfzhLZES1kSDUIxjVs8i4DYU+qx6oqrCTXqiCQQ=)
2: 4BB44892AE1111EBB4C2DA11C4F9AE02.roa (hash: F1fXz2/fZOT0A+vWKAw94iaOGisACVQx2A9nYViYNaI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DC146/DAA76492AE0E11EB8ABA334DC4F9AE02/aQxynxg5BWTWcLGPd3R1Tl0nmVE.crl
rsync://rpki.apnic.net/member_repository/A91DC146/DAA76492AE0E11EB8ABA334DC4F9AE02/aQxynxg5BWTWcLGPd3R1Tl0nmVE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aQxynxg5BWTWcLGPd3R1Tl0nmVE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Apr 2026 22:20:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1698 (0x6a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DC146, serialNumber=690C729F18390564D670B18F7774754E5D279951
Validity
Not Before: Apr 18 22:20:27 2026 GMT
Not After : Apr 25 22:20:27 2026 GMT
Subject: CN=69e403ac-b84e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:65:c7:09:b2:c6:bb:a5:76:c4:80:49:f7:6c:
57:f6:67:1d:90:c9:4e:fc:d2:70:bc:de:97:25:9b:
b3:53:2d:36:a5:9e:c1:8e:13:02:00:32:7d:cc:37:
d2:bb:2f:4a:67:5f:8b:d1:3a:f5:47:e1:b7:02:6e:
c2:43:82:7b:5e:6b:a3:db:0b:15:a2:14:58:7c:b7:
08:e4:30:e7:6c:ec:e7:67:d2:1f:f6:98:9e:5a:09:
c4:20:d8:94:15:ef:55:be:7d:3c:15:64:65:d3:ca:
e1:45:e7:50:f6:1f:1d:1b:7e:64:83:43:ad:e7:3f:
f2:57:06:4c:79:7f:1c:0a:21:e3:60:cf:1f:55:0c:
05:53:d6:13:d6:61:58:b9:5e:4a:e5:1f:33:8c:7e:
df:b9:27:78:f6:38:57:c5:ae:c0:15:3f:7f:07:3c:
15:76:ed:bf:5a:15:81:cc:a2:78:e0:ed:ef:91:dd:
38:c0:2b:5c:68:90:0e:dc:c5:34:02:31:43:39:2e:
a6:97:04:90:c7:fe:98:5c:1b:84:68:29:5a:56:91:
88:06:79:4f:7e:eb:f6:be:5e:bf:9d:ce:af:8e:fb:
17:66:df:b2:cf:6a:06:e1:be:d2:6a:ba:1a:00:bd:
20:53:fb:66:1e:0d:94:e9:79:d8:d3:69:86:bc:dc:
da:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:59:E8:44:7A:EF:6B:B3:2D:37:88:6D:46:75:1C:00:5D:AD:E9:DC
X509v3 Authority Key Identifier:
keyid:69:0C:72:9F:18:39:05:64:D6:70:B1:8F:77:74:75:4E:5D:27:99:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DC146/DAA76492AE0E11EB8ABA334DC4F9AE02/aQxynxg5BWTWcLGPd3R1Tl0nmVE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aQxynxg5BWTWcLGPd3R1Tl0nmVE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC146/DAA76492AE0E11EB8ABA334DC4F9AE02/aQxynxg5BWTWcLGPd3R1Tl0nmVE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6b:c6:ea:c4:29:25:52:c8:c9:80:18:c8:a7:90:06:43:b6:c2:
8f:a5:eb:4c:db:68:a5:5e:79:a0:bb:a6:19:1c:66:c1:fb:f3:
e5:74:9d:02:4a:2d:da:19:38:c5:db:61:5a:12:7c:73:8d:a9:
48:4c:cb:0d:39:48:96:48:99:ae:7c:e5:f1:d8:0f:0f:12:c5:
6f:a1:eb:5a:bf:36:f6:c7:21:da:ad:2d:41:6c:b4:63:23:be:
a6:36:1c:e1:52:c6:76:d9:a7:d2:23:74:95:a3:df:a8:81:ca:
1c:72:2f:7a:65:5b:e5:c4:21:5d:50:28:d0:f5:b4:67:04:e0:
3a:3d:1c:97:1b:45:e3:4b:fe:71:d8:1b:18:39:8e:d8:5f:c5:
0c:b2:45:2a:67:3e:c8:ca:c9:e9:79:99:6b:94:54:dd:80:df:
0c:71:be:24:7e:00:49:e2:7c:18:36:e7:38:75:70:32:ae:70:
76:ae:b6:2e:4d:e1:36:38:bc:31:94:53:b1:f1:4f:2e:39:4b:
ab:ec:24:e1:b8:06:59:01:4f:dd:f4:e4:30:00:35:9d:5e:6e:
ba:4d:18:a8:03:56:bc:72:86:75:7f:fb:44:18:9a:b7:2b:ae:
d5:dd:96:8c:f3:29:11:03:7b:90:60:e2:e0:07:a6:68:f4:a1:
7d:12:cf:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:07:15 2026 by rpki-client